CVE-2007-3967

Directory traversal vulnerability in index.php in PHP Directory Lister (dirLIST) before 0.1.1 allows remote attackers to list the contents of a parent directory via a .. (dot dot) in the folder parameter.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2007-07-25

Last modified

2025-04-03

Weaknesses

CWE-22

Affected products

• Dirlist Php (Dirlist)

References

• http://secunia.com/advisories/26144
• http://sourceforge.net/project/shownotes.php?release_id=524378
• http://www.securityfocus.com/bid/24987